CLAIMS 



What is claimed is: 

5 LA system for monitoring and logging events generated during the execution of an 

on-line service application, said system comprising: 

an event generator software module residing on a production server computer 
adapted to execute an on-line service application thereon, said event generator software module 
being operable to cause the generation of events and associated event data representative of the 
10 performance of said on-line service application during execution thereof by said production 
server computer; 

an event router software module residing on said production server computer and 
being operable to receive said events and associated event data and to produce a stream of events 
and associated event data for real-time event monitoring; 
15 a controller software module residing on said production server computer and 

being adapted to control operation of said event router software module and to reconfigure 
operation of said event router software module during execution of said on-line service 
application; and, 

a real-time event monitor software module residing on said production server 
20 computer and being configurable with threshold criteria related to said events and associated 
event data, said real-time event monitor software module being operable to receive said stream 
of events and associated event data and to generate alerts and associated alert data in response to 
said threshold criteria being exceeded by said events of said stream of events. 

25 2. The system of Claim 1, wherein said event generator software module includes 

respective software routines corresponding to said events and associated event data, and wherein 
said event generator software module is further operable to cause the generation of said events 
and associated event data in response to references to said software routines embedded in said 
on-line service application being encountered and acted upon during execution of said on-line 

30 service application. 
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3. The system of Claim 1, wherein at least one of said events has a level associated 
therewith during coding of said on-line service application, wherein said event router software 
module has a configurable parameter identifying a level for use in selecting which of said events 
is to be written to an event log data file, and wherein said event router software module is further 
5 operable to select said at least one of said events during execution of said on-line service 

application for writing to an event log data file based at least in part upon a comparison of said 
level associated with said at least one of said events and said level identified by said configurable 
parameter. 

10 4. The system of Claim 3, wherein said level identified by said configurable 

parameter is reconfigurable during execution of said on-line service application. 

5. The system of Claim 3, wherein said level associated with said at least one of said 
events is related to the volume of event data associated with said at least one of said events 

15 written to an event log data file upon the selection of said at least one of said events for writing 
to an event log data file. 

6. The system of Claim 1, wherein at least one of said events has a category 
associated therewith during coding of said on-line service application, wherein said event router 

20 software module has a configurable parameter identifying a category for use in selecting which 
of said events is to be written to an event log data file, and wherein said event router software 
module is further operable to select said at least one of said events during execution of said on- 
line service application for writing to an event log data file based at least in part upon a 
comparison of said category associated with said at least one of said events and said category 

25 identified by said configurable parameter. 

7. The system of Claim 6, wherein said category identified by said configurable 
parameter is reconfigurable during execution of said on-line service application. 

30 8. The system of Claim 6, wherein said category associated with said at least one of 

said events identifies a source code file of said on-line service application. 
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9. The system of Claim 1, wherein said event router software module is further 
operable to create buffers for receiving said events and associated event data, and wherein the 
minimum number of said buffers is reconfigurable during execution of said on-line service 

5 application. 

10. The system of Claim 1, wherein said event router software module is further 
operable to create buffers for receiving said events and associated event data, and wherein the 
maximum number of said buffers is reconfigurable during execution of said on-line service 

10 application. 



11. The system of Claim 1, wherein said event router software module is further 
operable to create buffers for receiving said events and associated event data, and wherein the 
size of said buffers is reconfigurable during execution of said on-line service application. 

15 

12. The system of Claim 1, wherein said event router software module is further 
operable to create buffers for receiving said events and associated event data, and wherein the 
time interval between flushes of said buffers is reconfigurable during execution of said on-line 
service application. 

20 

13. The system of Claim 1, wherein said event router software module is further 
operable to write said events and associated event data to an event log data file having a storage 
location, and wherein said storage location of said event log data file is reconfigurable during 
execution of said on-line service application. 

25 

14. The system of Claim 1, wherein said event router software module is further 
operable to write said events and associated event data to an event log data file having a file 
name, and wherein said file name of said event log data file is reconfigurable during execution of 
said on-line service application. 

30 
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15. The system of Claim 14, wherein said production server computer has an 
associated identifier uniquely identifying said production server computer, and wherein said file 
name of said event log data file is based at least in part on said identifier of said production 
server computer. 

5 

16. The system of Claim 14, wherein said event log data file has a creation time 
associated therewith, and wherein said file name of said event log data file is based at least in 
part on said creation time. 

10 17. The system of Claim 1, wherein said event log data file is a first event log data 

file and said event router software module is further operable to write said events and associated 
event data to said first event log data file during a time interval and to a second event log data 
file after expiration of said time interval, and wherein said time interval is reconfigurable during 
execution of said on-line service application. 

15 

18. The system of Claim 1, wherein said controller software module is further 
operable to enable and disable operation of said event router software module. 

19. The system of Claim 1, wherein said stream of events and associated event data 
20 comprises a first stream of events and said event router software module is further operable to 

produce a second stream of events and associated event data for non-real-time event monitoring, 
and wherein said event router software module is further operable to select events and associated 
event data generated by said event generator software module for inclusion in at least one of said 
first stream of events and associated event data and said second stream of events and associated 
25 event data. 

20. The system of Claim 1, wherein said stream of events and associated event data 
comprises a first stream of events and said event router software module is further operable to 
produce a second stream of events and associated event data, and wherein said system further 

30 comprises a non-real-time event monitor software module operable to monitor events and 
associated event data not monitored by said real-time event monitor software module. 
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21. The system of Claim 1, wherein said stream of events and associated event data 
comprises a first stream of events and said event router software module is further operable to 
produce a second stream of events and associated event data for writing to an event log data file, 
5 and wherein said system further comprises an event log data file collector software module 
residing on a processing server computer communicatively connected to said production server 
computer, said event log data file collector software module being operable to retrieve said event 
log data file from said production server computer. 



10 22. The system of Claim 21, wherein said event log data file is a first event log data 

file, wherein said event router software module is further operable to write said events and 
associated event data to a second event log data file, wherein said event log data file collector 
software module is operable to retrieve said first event log data file at a first time and said second 
event log data file at a second time, and wherein the time interval between said first time and 

15 said second time is reconfigurable during execution of said on-line service application. 

23. The system of Claim 21, wherein said event log data file is a first event log data 
file and said production server computer is a first production server computer, and wherein said 
event log data file collector software module is operable to retrieve a second event log data file 

20 from a second production server computer. 

24. The system of Claim 23, wherein said second production server computer has a 
unique identifier associated therewith, and wherein said event log data file collector software 
module is reconfigurable during execution of said on-line service application with said unique 

25 identifier associated with said second production server computer to cause retrieval of said 
second event log data file from said second production server computer. 

25. The system of Claim 23, wherein said on-line service application is a first on-line 
service application, and wherein said second event log data file is associated with a second on- 

30 line service application. 
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26. The system of Claim 1, wherein said stream of events and associated event data 
comprises a first stream of events and said event router software module is further operable to 
produce a second stream of events and associated event data for writing to an event log data file, 
and wherein said system further comprises an event log data file processor computer software 
5 module residing on a processing server computer communicatively connected to said production 
server computer, said event log data file processor software module being operable to convert 
said events and associated event data of said event log data file into a textual format. 



27. The system of Claim 1, wherein said stream of events and associated event data 
10 comprises a first stream of events and said event router software module is further operable to 
produce a second stream of events and associated event data for writing to an event log data file, 
and wherein said system further comprises an event log data file processor computer software 
module residing on a processing server computer communicatively connected to said production 
server computer, said event log data file processor software module being operable to 
15 communicate said events and associated event data of said event log data file for storage in a 
database of an archive server computer communicatively connected to said processing server 
computer. 



28. A system for monitoring and logging events generated during the execution of an 
20 on-line service application, said system comprising: 

an event generator software module residing on a production server computer 
adapted to execute an on-line service application thereon, said event generator software module 
comprising software routines operable to cause the generation of events and associated event 
data representative of the performance of said instrumented on-line service application when 
25 embedded references to said software routines are encountered during execution of said on-line 
service application by said production server computer; 

an event router software module residing on said production server computer and 
being operable to receive said events and associated event data and to produce a stream of events 
and associated event data for real-time event monitoring; and, 
30 a real-time event monitor software module residing on said production server 

computer and being configurable with threshold criteria related to said events and associated 
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event data, said real-time event monitor software module being operable to receive said stream 
of events and associated event data and to generate alerts and associated alert data in response to 
said threshold criteria being exceeded by said events of said stream of events, said threshold 
criteria being reconfigurable during execution of said on-line service application. 

5 

29. The system of Claim 28, wherein at least one of said events corresponds to a 
critical condition occurring during execution of said on-line service application and requiring 
notification of a person at least partially responsible for the operation of said on-line service 
application. 

10 

30. The system of Claim 28, wherein at least one of said events enables logging of 
diagnostic data representing the state of said on-line service application during execution at a 
desired location in source code thereof. 



15 31. The system of Claim 28, wherein at least one of said events enables tracking of 

the duration of a multi-stage process of said on-line service application. 

32. The system of Claim 28, wherein at least one of said events enables a 
determination as to when handled exceptions occur during execution of said on-line service 

20 application. 

33. The system of Claim 28, wherein at least one of said events enables designation 
of a specified variable for logging of performance data associated with the execution of said on- 
line service application. 



25 



34. The system of Claim 33, wherein said at least one of said events enables 
incrementing of said specified variable. 



35. A method of monitoring and logging the occurrence of pre-identified events 
30 generated during execution of an on-line service application, the method comprising the steps of: 



1199097_4.DOC 



57 



receiving a threshold criterion having associated threshold criterion data for use in 
determining whether an alert having associated alert data is to be generated upon the occurrence 
of a pre-identified condition during execution of an on-line service application, the threshold 
criterion being configurable during execution of the on-line service application; 
5 generating an event having associated event data upon the occurrence of the pre- 

identified condition during execution of the on-line service application; 

after generating the event, evaluating the threshold criterion substantially in real- 
time using the threshold criterion data and the generated event data to determine whether the 
threshold criterion is met; and, 
10 if the threshold criterion is met, producing an alert having associated alert data 

corresponding to the occurrence of the pre-identified condition and to the threshold criterion 
having been met. 

36. The method of Claim 35, wherein the method further comprises a step of 

15 communicating an alert and associated alert data to a device for presentation in substantially real- 
time to a person at least partially responsible for operation of the on-line service application. 

37. The method of Claim 35, wherein the generated event has an associated event 
identifier, wherein the threshold criterion data includes an event identifier, and wherein the step 

20 of evaluating includes comparing the event identifier associated with the generated event against 
the event identifier of the threshold criterion. 

38. The method of Claim 35, wherein the generated event has an associated event 
level, wherein the threshold criterion data includes an event level, and wherein the step of 

25 evaluating includes comparing the event level associated with the generated event against the 
event level of the threshold criterion. 

39. The method of Claim 35, wherein the generated event is one generated event of a 
plurality of generated events, wherein a portion of the generated events of the plurality of 

30 generated events correspond to transactions, wherein the threshold criterion data includes a 
number of occurrences of a particular transaction, an event identifier corresponding to the 
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particular transaction, a time interval, and a completion time for each instance of the particular 
transaction, and wherein the step of evaluating includes determining whether the number of 
occurrences of a transaction having the event identifier of the threshold criterion data and 
occurring within the time interval of the threshold criterion data require more than the 
5 completion time of the threshold criterion data to complete. 

40. The method of Claim 35, wherein the generated event is one generated event of a 
plurality of generated events, wherein a portion of the generated events of the plurality of 
generated events correspond to transactions, wherein the threshold criterion data includes a 

10 number of occurrences of a particular transaction, an event identifier corresponding to the 

particular transaction, a time interval, and a completion time for each instance of the particular 
transaction, and wherein the step of evaluating includes determining whether the number of 
occurrences of a transaction having the event identifier of the threshold criterion data and 
occurring within the time interval of the threshold criterion data require more than the 

15 completion time of the threshold criterion data to complete. 
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